Thanks Rob. I was able to get it to work by changing the rule to: Apply rule to messages from users Outside the organization and sent to <useraddress> send Delivery not authorized, message refused to sender with 5.7.1 except when the text <serverip> appears in a Received
Much appreciated!